Mozilla Uncovers Two Infected Add-ons, Issues Warning to Firefox Users
Article by George Norman
On 08 Feb 2010
Add-ons are great because they allow us to customize the way the Firefox browser looks, and enhance the way the Firefox browser works. The large majority of users get their add-ons from Mozilla’s official site, addons.mozilla.org (referred to as AMO). Mozilla uncovered that two malicious add-ons managed to sneak their way onto the experimental section of AMO. These add-ons are: Sothink Web Video Downloader version 4.0 and Master Filer (all versions). Both add-ons contained Trojan code meant to infect Windows computers.

“Two experimental add-ons, Version 4.0 of Sothink Web Video Downloader and all versions of Master Filer were found to contain Trojan code aimed at Windows users. Version 4.0 of Sothink Web Video Downloader contained Win32.LdPinch.gen, and Master Filer contained Win32.Bifrose.32.Bifrose Trojan. Master Filer was downloaded approximately 600 times between September 2009 and January 2010. Version 4.0 of Sothink Web Video Downloader was downloaded approximately 4,000 times between February 2008 and May 2008. Master Filer was removed from AMO on January 25, 2010 and Version 4.0 of Sothink Web Video Downloader was removed from AMO on February 2, 2010,” said Mozilla.

Advertising

Experimental add-ons are add-ons that have not undergone Mozilla’s public review process. To put it bluntly, Mozilla’s editorial team did not have the time to go over these add-ons. You can install an experimental add-on , put you do it at your own risk. In this case, if you installed one of the two malicious add-ons mentioned above, you would also install a Trojan on your computer. Getting rid of the Trojan is not as simple as uninstalling the add-on. You must use an antivirus program to scan your system and remove the Trojan – and any other infection.

Just because Mozilla did not go over an add-on with a fine comb, this is not to say it does not check for malware when accepting new add-ons. Mozilla uses several anti-malware scanning tools, but it would seem these two add-ons somehow managed to evade the malware detection tools.

“These were not originally detected with the anti-malware scanning tools that we have been using. We have since increased the number of scanning tools, and will be taking additional steps to minimize the risk of further incidents,” said Mozilla.

The bottom line is this; if you installed one of the two add-ons mentioned above, you need to uninstall them immediately. Then you need to use an antivirus program to scan your system and remove any infection. The recently released Avast! Free Antivirus 5 for example can and will remove any infection brought on by these malicious add-ons.



Tags: Mozilla, Add-ons, AMO, Trojan, Security
About the author: George Norman
George is a news editor.
You can follow him on Google+, Facebook or Twitter

I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular News
By George Norman on 17 Aug 2017
With the blockbuster movie season upon us, Sony decided to celebrate the occasion with a sale: the Attack of the Blockbusters Sale that offers discounts of up to 50% (60% if you’re a PlayStation Plus member) on a ton of PS4 video games.
By George Norman on 17 Aug 2017
Samsung’s new T5 portable solid-state drive (PSSD) uses the latest 64-layer V-NAND technology, offers between 250GB and 2TB of storage capacity, has a lightweight and shock-resistant design that’s smaller than the average business card, and delivers industry-leading transfer speeds of up to 540 MB/s.
Related News
By George Norman on 24 Jul 2017
As someone who has been using Firefox day-to-day for a very – VERY – long time, I’ve grown to know a lot about Mozilla’s web browser. As such, I thought it a good idea to share part of my knowledge with you and highlight 10 tips & tricks that I’m sure you’ll find very useful.
By George Norman on 14 Aug 2017
Firefox Send works with any modern web browser (not just Mozilla’s own), it lets you safely send files up to 1GB in size, and using it is a fairly simple process, as you can see in this how-to guide.
By George Norman on 02 Aug 2017
Voice Fill uses spoken language to enter queries into search engines. Notes is a built-in notepad that you can use to jot down ideas. And Send lets you send encrypted, self-destructing files over the internet.
By George Norman on 16 Jun 2017
When companies pick an official slogan or motto, they usually go with something they think will impress. Well, these aren't your regular slogans. These are snarky slogans thought up by a cranky a-hole.
Sponsored Links
Hot Software Updates
Top Downloads
Become A Fan!
Link To Us!
Mozilla Uncovers Two Infected Add-ons, Issues Warning to Firefox Users
HTML Linking Code